Extracted

• • Target

    d9490a27fd8fa05e22b303586fbf649e3d85e401660d8eecbd327fdd97e74171

  • Size

    270KB

  • MD5

    4a67cb3d02acf7ecf7869b8993189f3a

  • SHA1

    740c1e8b1f9d9d807f642fb5220c414608331aa1

  • SHA256

    d9490a27fd8fa05e22b303586fbf649e3d85e401660d8eecbd327fdd97e74171

  • SHA512

    d4b153804ff077a937dd504b2f0416c573fb1efb2005fcad5ecb1506ccc7bfe7a6e477566d48848b85cb1d28eca1cca8f83d28a1b3919738980cc59a24004bd9

  • SSDEEP

    6144:EzmNgW4fcJr/tODopZu3j2IOT7jdNUJp8wI:EzmNgWvJr/dZu30dNUU

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2